CVE-2006-0669
- State
- Published
- Severity
- Not scored
- Published
- Feb 13, 2006
- Updated
- Aug 7, 2024
- Reserved
- Feb 13, 2006
Description
Multiple SQL injection vulnerabilities in archive.asp in GA's Forum Light allow remote attackers to execute arbitrary SQL commands via the (1) Forum and (2) pages parameter. NOTE: SecurityTracker says that the vendor has disputed this issue, saying that GA Forum Light does not use an SQL database. SecurityTracker's research indicates that the original problem could be due to a vbscript parsing error based on invalid arguments
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 16563vdb-entry
- gasforumlight-archive-sql-injection(24616)vdb-entry
- 1015600vdb-entry
- 20060220 vendor dispute for CVE-2006-0669mailing-list
- 23509vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.